---
id: 04-web-next-shell
epic: platform-retrofit
title: Reduce web-next to an auth shell with a boot smoke assertion
type: technical-story
status: todo
feature: web-next
depends-on: [03-delete-demo-apps-and-features]
blocks: [08-rewrite-agent-docs]
created: 2026-07-12T10:22:00Z
---

## Goal

`apps/web-next` is a compiling shell: auth (sign-in/out) plus a minimal authenticated placeholder home page. The app bootstrap stays intact — `bindAll()`, instrumentation — and a dev-seed boot smoke test asserts `bindAll()` resolves with only auth bound, proving no dangling DI symbols from the deleted features. `apps/cms` (Payload admin over the remaining collections) and `apps/storybook` stay as-is.

## Why

Veect features land on a stable floor: the repo must typecheck/test green with only auth + core packages (PRD user story 4). The workspaces UI that replaces the placeholder arrives with the next PRD (walking skeleton), so the shell needs to prove exactly one thing — sign-in works and nothing references deleted features.

## Done when

- `pnpm dev` boots web-next in dev-seed mode (no Payload required) with sign-in working.
- The home page is a minimal authenticated placeholder; auth UI surfaces and app bootstrap (`bindAll()`, instrumentation) are untouched.
- A dev-seed boot smoke test asserts `bindAll()` resolves with only auth bound (mirrors the existing boot-assertion pattern in web-next's server bootstrap tests).
- The auth sign-in Playwright spec is green as the surviving e2e baseline.
- `pnpm typecheck && pnpm lint && pnpm test && pnpm conformance && pnpm fallow:audit && pnpm coverage:diff` pass on every commit.

## In scope

- Replacing the web-next home page with a minimal authenticated placeholder; removing any remaining demo-content leftovers in web-next (layouts, nav chrome, metadata).
- The boot smoke assertion in web-next's server bootstrap tests.
- Keeping the auth e2e sign-in spec green.

## Out of scope

- The workspaces UI / any new Veect feature surface (walking-skeleton PRD).
- The landing page (`polish-playground-landing` PRD — this epic leaves no marketing surface).
- Changes to `apps/cms` or `apps/storybook`.
- Auth feature changes — its manifest, tests, and coverage bands stay untouched.

## Tasks

- [ ] Replace the web-next home page with a minimal authenticated placeholder, keeping the auth UI surfaces (sign-in/out) and app bootstrap (`bindAll()`, instrumentation) intact, and remove any remaining demo-content leftovers in the app — one commit, all gates green, auth e2e spec still passing.
- [ ] Add the dev-seed boot smoke assertion: a web-next server bootstrap test proving `bindAll()` resolves with only auth bound (no dangling DI symbols from deleted features), mirroring the existing boot-assertion pattern — one commit, all gates green.
